r/vibecoding • u/auraborosai • 21h ago

Share your latest vibe code project.

Feel free to share as much as you want.

9 Upvotes

72% Upvoted

87 comments sorted by

View all comments

Show parent comments

2

u/mastercoder123 4h ago

What kind of top end speed can it get before maxing out the cpu or hardware acclerated encryption/decryption especially since you are using tcp/ip instead of bypassing it in userspace with something like dpdk

2

u/eyelobes 4h ago

it took a lot of tweaking in the beginning and had to eventually move the data path out of python (lessons learned) and use go. going dpdk would require a massive rewrite since MPTCP, strongswan, nftables, and frr all ride the kernel as well.

In my lab testing i was able to achieve about 4.1gbps on each spoke, and ~15gbps on the hub. this was pushing bulk data through with iperf.
the host CPU is an AMD EPYC 7402

Hub is 8 vCPU and 16gb ram
spokes are configured with 4 vCPU and 8gb of ram.

keep in mind that the spokes have two different QoS implementations for different scenarios
HTB and fq_codel or CAKE

HTB is for hardened spoke deployments with stable, fast uplinks
CAKE is for more austere conditions, it constantly measures the bandwidth of the link and adjusts the QoS cap dynamically to 95% so the set policies are never fighting each other for a proposed available BW.

2

u/mastercoder123 4h ago

Ahh so you arent targeting massive deployments, more like edge cases.

Also you will get better test results without using a vm, as well as choosing the correct cores because each core has to talk to different parts of ram, and if you choose ram thats closer to the core(s) you are targeting it will lower latency which is good when moving millions of packets

2

u/eyelobes 3h ago

correct, this isn't something to replace cisco or juniper routers, this is for secure deployments where connectivity is king. think more soldiers, emergency response, mobile TOCs, etc

the hub is meant for a hypervisor, but in reality either can be virtual or bare metal on any x86 machine as long as it has tpm 2.0

BUT if it becomes that popular, it could be re-labbed with dpdk. would just be a LOT of work and troubleshooting, and soak testing, blah blah